marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 03:49:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(three-stage-scan): map sandbox outcomes to worth-fixing verdicts

Browse Source
This commit is contained in:
Marius Ciepluch
2026-09-03 22:59:01 +02:00
parent 62c7990e49
commit 331b62f1c1
5 changed files with 336 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/three-stage-scan/tasks.md
+1 -1
View File
@@ -102,7 +102,7 @@ This plan ships the three-stage scan without rebuilding CWE policy or the regex
## Phase 3 — Core: Regression verdicts
- [ ] 5. Produce worth-fixing verdicts from sandboxed candidates
- [x] 5. Produce worth-fixing verdicts from sandboxed candidates
- [x] 5.1 Select a bounded candidate set from hotspots and severe reachable inventory
- Selection honors max-candidates and always includes reachable severity-5 inventory even when the ledger demoted the hotspot.
- Observable completion: a unit test with six hotspots and max-candidates three returns three, plus the sev-5 reachable extra when present.